This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Cclm4MFxu0yQ0JTtk_msTS4PV0s.roa
File:                     Cclm4MFxu0yQ0JTtk_msTS4PV0s.roa (raw, json)
Hash identifier:          3bwXgELTXSZ9bRU4aP/c8bdFVlmYYS0Eh+Ka9DLeSwc=
Subject key identifier:   09:C9:66:E0:C1:71:BB:4C:90:D0:94:ED:93:F9:AC:4D:2E:0F:57:4B
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1275
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Cclm4MFxu0yQ0JTtk_msTS4PV0s.roa
Signing time:             Tue 03 Feb 2026 03:39:35 +0000
ROA not before:           Tue 03 Feb 2026 03:39:35 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        210.60.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4725 (0x1275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 03:39:35 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=09C966E0C171BB4C90D094ED93F9AC4D2E0F574B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4f:5c:fc:51:97:25:fc:7f:20:fa:f2:c3:5d:
                    df:40:6d:a7:cf:58:b4:10:26:23:a2:60:a2:5c:4f:
                    8b:c5:6b:20:6c:b4:64:38:d7:2a:5a:96:68:03:38:
                    dc:41:05:43:41:bb:44:60:1c:84:3a:f4:f8:e7:5c:
                    b9:19:d7:fd:89:9b:d1:10:6d:30:28:19:c4:36:33:
                    61:3c:65:48:b9:31:f6:fc:16:cd:bc:b1:e8:24:d7:
                    a1:61:9e:e5:6d:7c:23:7a:97:48:f3:99:63:ab:46:
                    ea:f5:65:3c:2b:1d:02:12:57:35:7a:b5:8a:73:f1:
                    82:22:9a:dc:0f:a7:86:df:43:0e:b8:0a:4e:0e:b6:
                    09:c8:71:eb:3b:65:01:a5:9d:70:da:1e:fd:6d:c2:
                    64:f8:df:f7:e8:ea:ea:54:d0:11:4e:f8:8e:c4:17:
                    3a:fd:41:c9:be:06:e8:ab:61:51:10:79:e9:26:5c:
                    92:30:5d:64:03:5c:98:dc:b4:a9:e3:d0:d2:3d:13:
                    46:25:38:03:45:28:19:6b:49:23:f3:65:3d:84:7b:
                    3a:18:3a:2c:ac:49:39:69:1f:2c:7f:63:c7:70:4c:
                    e6:3b:9b:e9:37:31:a9:7d:23:2d:5d:06:86:3f:15:
                    47:a6:1a:d7:5a:27:7e:a9:76:98:a9:fa:86:03:7c:
                    42:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C9:66:E0:C1:71:BB:4C:90:D0:94:ED:93:F9:AC:4D:2E:0F:57:4B
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Cclm4MFxu0yQ0JTtk_msTS4PV0s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.60.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:60:6f:4a:03:e3:b4:d8:30:ee:89:db:73:47:54:48:0e:82:
         84:89:67:4b:c0:c7:9c:4b:72:b1:d8:2b:5c:a3:1b:6b:d7:fb:
         61:98:36:e9:a5:40:7b:42:e1:54:b6:6e:b4:29:d8:99:5d:b1:
         63:09:6b:08:2f:4b:e6:be:06:17:70:f5:27:12:4a:7c:c7:52:
         e2:a9:da:03:fa:ba:6a:1e:bf:24:06:fa:ff:e1:3b:cf:53:c9:
         54:46:33:bf:90:d1:af:19:3a:13:ea:b2:04:7d:7e:aa:46:69:
         36:0d:3e:75:7f:80:06:00:58:66:33:91:6e:c3:bd:c3:fa:f0:
         ec:70:da:77:80:06:1a:1a:ca:28:32:36:91:ca:3b:78:da:a8:
         a4:21:70:77:64:4f:2d:37:e8:ca:a7:87:55:4f:e3:9b:84:ab:
         1a:40:ac:7f:a6:f7:36:35:c7:4a:dd:32:82:83:10:6f:af:dc:
         7e:43:7c:be:5e:3c:03:81:4c:58:97:20:d8:1b:64:e2:c7:d4:
         d9:5c:c2:68:55:2e:08:c0:00:b4:5b:d2:f2:e5:5f:b2:07:84:
         2c:0c:79:d2:70:2e:c3:fb:f1:7e:12:ca:e3:1c:2f:89:80:98:
         6c:14:26:19:9d:1f:78:a0:d7:d9:36:ca:8e:57:cf:5b:6c:ba:
         92:f6:b5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:54 2026 by rpki-client